Subject: Re: [kitten] Is there a difference between a one zero-length component princ and a no-component princ?

From: Jeffrey Hutzelman <[email-masked]>
Date: Tue, 11 Jun 2013 14:22:17 -0400

On Mon, 2013-06-10 at 00:03 -0500, Nico Williams wrote:

> I had considered using krbtgt/REALM@REALM, but this felt
> unsatisfactory.  @REALM is much more natural and happens to work and
> almost certainly is available.

Note that we already use this for naming realms in certificates issued
to KDCs for use with PKINIT.